Difference between revisions of "GCP Bucket permissions"
Jump to navigation
Jump to search
| (19 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | There are two modes of manage permissions for GCP buckets: | ||
| + | * Uniform bucket-level access <code>[[gsutil ubla]]</code > | ||
| + | * Fine-grained ACL based <code>[[gsutil defacl]]</code>. | ||
| + | |||
| + | If Uniform access is enabled fine-grained ACL mode will be disabled. | ||
| + | |||
| + | |||
| + | |||
* [[Gcloud uniform bucket-level access|Uniform bucket-level access]]: <code>[[gsutil ubla]]</code> | * [[Gcloud uniform bucket-level access|Uniform bucket-level access]]: <code>[[gsutil ubla]]</code> | ||
| − | * <code>[[gsutil defacl]]</code> | + | * [[ACL]]: <code>[[gsutil defacl]]</code> |
* [[To add conditions, switch the bucket from fine-grained to uniform bucket-level access control]] | * [[To add conditions, switch the bucket from fine-grained to uniform bucket-level access control]] | ||
| Line 7: | Line 15: | ||
* [[Google Cloud Storage Bucket]] | * [[Google Cloud Storage Bucket]] | ||
* <code>[[gcloud iam roles list]]</code> | * <code>[[gcloud iam roles list]]</code> | ||
| + | * <code>[[Storage Admin]], [[Storage Object Admin]], [[Storage Object Admin]], [[Storage Object Viewer]]</code> | ||
| + | * <code>[[storage.objects.list]]</code> | ||
| + | * <code>[[storage.buckets.list]]</code> | ||
| + | * <code>[[storage.objects.get]]</code> | ||
== See also == | == See also == | ||
| + | * {{gsutil ubla}} | ||
| + | * {{gsutil}} | ||
* {{GCS}} | * {{GCS}} | ||
[[Category:GCS]] | [[Category:GCS]] | ||
Latest revision as of 06:29, 20 September 2022
There are two modes of manage permissions for GCP buckets:
- Uniform bucket-level access
gsutil ubla - Fine-grained ACL based
gsutil defacl.
If Uniform access is enabled fine-grained ACL mode will be disabled.
- Uniform bucket-level access:
gsutil ubla - ACL:
gsutil defacl - To add conditions, switch the bucket from fine-grained to uniform bucket-level access control
Related[edit]
- Google Cloud Storage Bucket
gcloud iam roles listStorage Admin, Storage Object Admin, Storage Object Admin, Storage Object Viewerstorage.objects.liststorage.buckets.liststorage.objects.get
See also[edit]
gsutil ubla [ set | get ]gsutil[config | singurl | mb | iam | cp | ls | acl | defacl | ubla | du | --help],$HOME/.boto, Cloud Shell- GCS, GCS Bucket, permissions, GCS Object versioning,
gsutil, Folder (Object Storage), GCS lifecycle,gcsfuse, Storage Admin
Advertising:
